This latest variant of Simplocker generates a unique key for each device that it infects, making it more difficult to decrypt the files on each device.
Anyone who visited the websites of The Huffington Post and LA Weekly - among other websites - on Saturday or Sunday stands to be infected with a Kovter trojan used for advertising click fraud.
The ruse involves sending phony fax message links in spam messages to victims, which ultimately lead to downloading the malware which steals banking credentials.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.